Ruby Issue Tracking System

11/22/2021

05:23 PM Ruby Bug #18356: Please replace use of unsafe MD5 with another digest algorithm

byroot (Jean Boussier) wrote in #note-2:
> This is all from bundler / rubygems, so I believe we should close as a third party issue.
Please note that was a filtered list, there are other dependecies, such as `pop3`/`imap`, `cgi`, and... pvalena (Pavel Valena)

11:39 AM Ruby Bug #18356 (Third Party's Issue): Please replace use of unsafe MD5 with another digest algorithm

Similarly to https://bugs.ruby-lang.org/issues/18272
## Context
When working on a new version of RHEL (with Ruby 3.0), the requirement is to have a better security (remove unsafe digests or limit the use for non-security purposes). T... pvalena (Pavel Valena)

11/08/2021

11:43 AM Ruby Feature #18272: Please replace unsafe SHA1 with another digest algorithm

Another suggestion from our internal discussion:
```
SHA1 should work for you, though it would be better if you could switch to EVP API from old SHA* API, if you by chance still use it.
``` pvalena (Pavel Valena)

10/27/2021

12:00 PM Ruby Feature #18272 (Third Party's Issue): Please replace unsafe SHA1 with another digest algorithm

## Context
When working on a new version of RHEL (with Ruby 3.0), the requirement is to have a better security (remove unsafe digests or limit the use for non-security purposes). This would be achieved with using OpenSSL 3.0 as well, wh... pvalena (Pavel Valena)

09/13/2021

03:35 PM Ruby Bug #18163: Unclear String documentation of <=> and casecmp methods

> I'd expect 'B' <=> 'A' to result in -1 since 'B' is smaller.
This should've been: `since 'A' is smaller`. pvalena (Pavel Valena)

03:32 PM Ruby Bug #18163 (Closed): Unclear String documentation of <=> and casecmp methods

I have a new student learning Ruby, and there are apparent inconsistencies in Ruby documentation.
The problem appears to be in the order of parameters / variables `self` and `other_string`.
<=>
https://docs.ruby-lang.org/en/3.0.0/St... pvalena (Pavel Valena)

06/10/2021

08:26 AM Ruby Feature #17944 (Open): Remove Socket.gethostbyaddr and Socket.gethostbyname

It is marked as unsafe by our static analysis. Can it be removed now?
It was deprecated in:
https://bugs.ruby-lang.org/projects/ruby-master/repository/trunk/revisions/60266
https://bugs.ruby-lang.org/issues/13097 pvalena (Pavel Valena)

10/09/2019

03:41 AM Ruby Revision b439ee1b (git): Remove uselsess shebang

as the file is not executable anyway. pvalena (Pavel Valena)

01/07/2019

09:06 PM Ruby Bug #15516 (Third Party's Issue): Ruby 2.6: `gem build` requires files located in gemspec directory

The `gem build` command requires gem files located in the directory where .gemspec file is.
Introduced with Merge RubyGems 3.0.0.beta1[1],
specifically ` Dir.chdir(File.dirname(gemspec)) do`.
On Fedora[2], this results in pa... pvalena (Pavel Valena)

10/06/2017

01:55 AM Ruby Bug #13980 (Closed): Rounding failure on i686 (i386).

Revision 58513 introduced rounding failure:
```
1) Failure:
TestFloat#test_round_with_precision [/builddir/build/BUILD/ruby-2.3.5/test/ruby/test_float.rb:448]:
<5.02> expected but was
<5.01>.
15981 tests, 2235227 assertions, 1 ... pvalena (Pavel Valena)